Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/ff4rv4tDaWJHzSjR4BBO7hN6plw.roa
File: ff4rv4tDaWJHzSjR4BBO7hN6plw.roa (raw, json)
Hash identifier: LeP04I4f13zCaHCEIeqT8yegqVBivMH9oAqSGqGooY8=
Subject key identifier: 7D:FE:2B:BF:8B:43:69:62:47:CD:28:D1:E0:10:4E:EE:13:7A:A6:5C
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 5295
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/ff4rv4tDaWJHzSjR4BBO7hN6plw.roa
Signing time: Wed 08 May 2024 16:53:58 +0000
ROA not before: Wed 08 May 2024 16:53:58 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21141 (0x5295)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 8 16:53:58 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=7DFE2BBF8B43696247CD28D1E0104EEE137AA65C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:bc:27:7a:a0:80:f5:76:97:32:64:d3:16:8f:
46:68:62:36:0c:ba:d0:96:d4:41:21:d0:75:43:0d:
29:fc:87:97:d8:22:19:b3:ff:7c:83:a1:f0:39:70:
5f:72:00:c7:c2:8b:8b:2a:8f:0e:1d:61:62:c0:ca:
3d:ca:72:8c:7c:fe:33:e7:3f:00:09:aa:1c:16:80:
7d:b6:b3:30:3a:f7:5b:3c:4c:ba:32:94:8f:c2:25:
9c:b9:99:59:44:76:31:b5:87:74:e7:be:99:d7:9e:
22:0a:cb:4b:55:60:11:0d:4d:1b:c0:b4:39:1b:e3:
e8:9f:dc:ff:c7:e7:8c:70:48:62:0d:64:d9:c8:f6:
27:8a:04:d6:a2:86:45:65:5b:cf:bd:bf:25:8b:e3:
65:07:7f:21:61:6e:28:64:e0:b5:51:fd:0a:8a:82:
4e:70:12:06:98:7f:e5:9b:c5:d4:98:fa:f9:7e:39:
ec:cb:d8:05:5d:f7:7e:e5:9b:58:02:e6:2b:fa:52:
d3:a3:e1:fa:6f:95:ce:09:f0:88:44:ac:6a:52:66:
64:ec:c5:41:0f:0e:d3:68:c9:8d:5b:70:cb:78:ff:
80:e2:4a:2b:70:c2:92:55:50:46:7a:66:10:0c:26:
33:dd:67:75:5e:4d:41:45:46:b4:2e:0b:af:a2:c3:
e2:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:FE:2B:BF:8B:43:69:62:47:CD:28:D1:E0:10:4E:EE:13:7A:A6:5C
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/ff4rv4tDaWJHzSjR4BBO7hN6plw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
4a:03:c2:27:37:ae:49:b8:92:00:e8:77:e6:5e:2c:3f:51:05:
81:e0:0d:ab:d7:37:ab:da:7f:1a:84:e9:48:67:c1:d3:68:3b:
8e:61:83:0b:fc:35:67:b6:b2:4f:60:4f:c5:cb:d4:e2:ca:55:
a6:f8:90:8a:91:d6:a1:01:98:e4:19:d2:9a:83:a3:f9:42:42:
ed:5a:03:ff:b1:4f:57:e3:52:1c:3d:2b:0e:61:c3:34:db:33:
08:91:b4:bb:71:fb:12:e3:93:b5:da:fb:44:b3:67:33:ad:c5:
07:9a:eb:2a:ac:5a:c4:4e:0c:c3:9e:8a:30:c6:1a:1a:e2:a9:
5b:29:59:63:b4:65:71:d8:2f:1c:19:d6:9b:5b:a6:a5:b7:c7:
57:87:ce:ce:52:fa:d8:54:d4:6c:67:ff:00:88:43:26:98:f5:
fe:35:50:db:d8:09:1c:06:0a:5b:d3:d4:76:5f:bc:91:51:c4:
2f:9b:bd:15:82:c4:8f:f0:f2:9e:cc:d7:ec:20:c1:b2:e4:5b:
26:30:2e:bd:3b:c9:a1:a1:cd:40:66:50:68:ea:26:e2:a3:ac:
c3:8a:bf:9b:dd:f3:b4:c0:55:3d:f0:79:ec:22:dc:61:e5:95:
b5:a9:34:c5:8b:bc:b3:3c:af:f4:0f:32:61:41:1d:10:84:6e:
71:e5:fc:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:09:46 2025 by rpki-client